CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows denial of service4.9 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows information disclosure5.9 Medium
- delta electronics diaenergieImproper Authorization8.8 High
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure6.2 Medium
- ibm security verify access, security verify access docker +1 moreIBM Security Verify Access HOST header injection6.5 Medium
- ibm aspera faspexIBM Aspera Faspex cross-site scripting5.4 Medium
- ibm aspera faspexIBM Aspera Faspex code execution9.8 Critical
- wpdevart booking calendar, appointment booking system, booking calendar +1 moreWordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- hasthemes extensions for cf7, extensions for cf7 (contact form 7 database, conditional fields and redirection) +1 moreWordPress Extensions For CF7 Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
phpOSS-FuzzHeap-use-after-free in zend_ast_evaluate_innerNo scorelibavcOSS-FuzzHeap-buffer-overflow in isvcd_residual_samp_mb_dyadicNo scoremosquittoOSS-FuzzHeap-use-after-free in config__cleanupNo scoremosquittoOSS-FuzzHeap-buffer-overflow in mosquitto__strdupNo score- linux kernelUse after free in io_uring in the Linux Kernel5.5 Medium
- phjounin tftpd64-se, tftpd64 project tftpd64 +1 morephjounin TFTPD64-SE tftpd64_svc.exe unquoted search path7.0 High
- online pizza ordering system project pizza ordering system, sourcecodester online pizza ordering system +1 moreSourceCodester Online Pizza Ordering System index.php sql injection6.3 Medium
- kron tech single connectAuthorization Bypass Through User-Controlled Key on Single Connect8.8 High
- dell secure connect gateway, secure connect gateway (scg) 5.0 appliance - srs +1 moreDell Secure Connect Gateway (SCG) version 5.14.00.12 contains a broken cryptographic algorithm...5.9 Medium
- peazip project peazipAn issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End...5.5 Medium
- webtechnologies changedetectionStored cross site scripting in changedetection.io5.4 Medium
- ujcmsA cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary...6.1 Medium
- python, fedoraproject fedora, netapp active iq unified manager +6 more +8 moreAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 High
- luckyframe luckyframewebLuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope...9.8 Critical
- luckyframe luckyframewebLuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope...9.8 Critical
- luckyframe luckyframewebLuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope...9.8 Critical
- realtimelogic fuguhubReal Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE)...8.8 High
- moodleMoodle: possible to set the preferred "start page" of other users8.2 High
- moodleMoodle: reflected xss risk in blog search6.1 Medium
- moodleMoodle: reflected xss risk in some returnurl parameters6.1 Medium
- canteen management system project management systemCanteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php.9.8 Critical
- totolink a720r firmwareTOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.9.8 Critical
- ecisp espcmsAn issue was discovered in ESPCMS P8.21120101 after logging in to the background, there is a SQL...7.2 High
- adobe animateAdobe Animate FLA files Use After Free Arbitrary code execution7.8 High
- adobe premiere rushAdobe Premiere Rush PSD files Use After Free Arbitrary code execution7.8 High
- adobe animateAdobe Animate SVG file Stack-based Buffer Overflow Arbitrary code execution7.8 High
- adobe after effectsAdobe After Effects Improper Input Validation Remote Code Execution Vulnerability7.8 High
- adobe after effectsAdobe After Effects Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe after effectsAdobe After Effects Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe animateAdobe Animate Heap-based Buffer Overflow Arbitrary code execution7.8 High
- adobe premiere rushAdobe Premiere Rush PSD file Stack-based Buffer Overflow Arbitrary code execution7.8 High
- adobe after effectsAdobe After Effects Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe connectAdobe Connect Improper Access Control Security feature bypass5.3 Medium
- adobe bridgeAdobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe bridgeAdobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge Improper Input Validation Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge SVG file Stack-based Buffer Overflow Arbitrary code execution7.8 High
- adobe framemakerAdobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe framemakerAdobe FrameMaker Improper Input Validation Remote Code Execution Vulnerability7.8 High
- Show moreLoading…